Think Before 
YOU 


is a general term used to 
describe how bad actors manipulate individuals 
into giving them access to personal information. 


is the most common form of social 
engineering for stealing an individual’s personal 
information like IDs or passwords, or for installing 
malware which can be used for various purposes 
including ransomware attacks. 


Rise in ransomware attacks in 
the US in the past year. ' 


Of malware on computers found 
their way there via phishing email.’ 


Of individuals that click on a phishing 
link are likely to enter their credentials 
on a phishing website.” 


Phishing sites have been found 
and registered as malicious by 
Google as of January 2021. 


Phishing attacks are easier to avoid 
when you know how to spot them 


It only takes one wrong move for cybercriminals to access your data 
or your company’s systems. Protect yourself, your family, and your 
organization by learning how to recognize common phishing tactics. 


Email Phishing 


An email sent with the intention of 
deceiving you to act, such as updating a 
password or clicking on an attachment. 
96% of all phishing attacks come via email.* 


Smishing 

Phishing via text. The fraudulent text may 
appear to come from a reputable business, 
but is designed to trick you into revealing 
personal information. 


Vishing 

Also known as voice phishing occurs via 
phone. The caller typically leaves an 
“urgent” message, making recipients 
believe they will be fined or miss out on a 
potential windfall if they don’t respond 
immediately. 


Angler Phishing 

Targets social media users. Bad actors will 
direct message disgruntled customers, 
pretending to be customer service agents, 
to obtain personal information or other 
account credentials. 


Evil Twin Hotspots 


Fraudulent Wi-Fi access points designed 
to trick users to connect to them so they 
can steal sensitive information or redirect 
links to malicious sites. 


Pop-up Phishing 

Fraudulent messages that “pop up” on 
otherwise legitimate websites that have 
been infected with malicious code and 
entice you to click on them to corrupt 
your device or data. 


Dont take the bait. 
Verify before you act 


Avoid unknown senders. 
Check names and email 
addresses before responding. 


Don’t trust links or attachments 
in unsolicited emails. 


Be suspicious of emails 
marked “urgent.” 


Beware of messages with 
mistakes in spelling or grammar. 


Don't be lured by “deals”. They 
are usually too good to be true. 


Consider finding an email 
provider that is more secure 
than the free options. 


Never give out personal or 
financial information based on 
an email request. 


When receiving email from 
known institutions (government, 
banks, your doctor), go directly 
to the source instead of clicking 
on links in the email. 


Be wary of generic greetings, 
such as dear sir or ma’am. 


Understand your service provider’s 
policy for tracking and stopping 
phishing. 


Don’t give a stranger or unsolicited 
help access to your computer. 


It's time to rethink email security 


Cisco Secure Email rapidly detects, quarantines, investigates, and remediates 


phishing and other cyberattacks that target your email. Plus, our built-in Securex 


platform, included with each email license, provides enhanced visibility, automation, 


and a layered approach to security across all of our Cisco Secure products. 


for more information about the 
Anatomy of a Modern Phishing Attack 
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